We undertake a number of procedures to ensure that all patient information is handled according to the National Privacy Laws. A copy of the Privacy Act is included in the FNQ clinic Practice Manual and each staff member is required to be aware of its contents.
Exceptions exist to the access of your health information, for example where:
It would pose a serious threat to anyone’s life or health;
It would have an unreasonable impact on someone else’s privacy;
The request is frivolous or vexatious;
The information relates to existing or anticipated legal proceedings between the organisation and the information would not ordinarily be obtainable by the process of discovery in those proceedings;
It would be unlawful to provide access, or denial is authorised by law;
It might prejudice an investigation of possible unlawful activity.
It is necessary for us to collect personal information from patients and sometimes others associated with their health care in order to attend to their health needs for associated administrative purposes.
Health
information is ‘sensitive information’ for the purposes of privacy legislation.
This means that generally patient’s consent will be sought to collect health
information that is necessary to make an accurate medical diagnosis, prescribe appropriate
treatment and to be proactive in patient health care.
A patient’s personal health information is used or disclosed for purposes directly relation to their health care and in ways that are consistent with a patient’s expectations. In the interest of the highest quality and continuity of health care this may include sharing information with other health care providers who comprise a patient’s medical team from time to time. In addition there are circumstances when information has to be disclosed without patient consent, such as:
Emergency situations.
By law, doctors are sometimes required to disclose information for public interest reasons, eg mandatory of reporting of some communicable diseases.
It may be necessary to disclose information about a patient to fulfil a medical indemnity insurance obligation.
Provision of information to Medicare or private health funds, if relevant, for billing and medical rebate purposes.
In general a patient’s health information will not be used for any other purposes without their consent. There are some necessary purposes of collection for which information will be used beyond providing health care, such as professional accreditation, quality assessments, clinical auditing, billing and so forth.
All patient information held by this practice relevant to the functions of providing health care will be maintained in a form that is accurate, complete and up to date.
The
storage, use and, where necessary, transfer of personal health information will
be undertaken in a secure manner that protects patient privacy. It is necessary
for medical practices to keep patient information after a patient’s last
attendance for as long as is required by law or is prudent having regard to
administrative requirements.
This practice has made this and other material available to patients to inform them of our policies on management of personal information. On request this practice will let patients know, generally, what sort of personal information we hold, for what purposes, and how we collect, hold, use and disclose that information.
Patients may request access to their personal health information held by this practice.
Where necessary, patients will be given the opportunity to amend any personal information held that is incorrect.
There are some circumstances in which access is restricted, and in these cases reasons for denying access will be explained.
A charge may be payable where the practice incurs costs in providing access.
This practice acknowledges the right of children to privacy of their health information. Based on the professional judgment of the doctor and consistent with the law, it might at times be necessary to restrict access to personal health information by parents or guardians. Upon request a patient’s health information held by this practice will be made available to another health service provider.
These
are the numbers, letter or symbols that are used to identify patients with or
without the use of a name. (eg Medicare numbers). We will limit the use of
identifiers assigned to patients by Commonwealth Government agencies to those
uses necessary to fulfil our obligations to those agencies.
A patient has a right to be dealt with anonymously, provided this is lawful and practicable. However, in the medical context this is not practicable or possible for Medicare and insurance rebate purposes. It could also be dangerous to the patient’s health.
Individuals privacy is protected Australia-wide by privacy laws. We will take steps to protect patient privacy if information is to be sent interstate or outside of Australia.
Computer screens and patient records are out of view of other people.
Firewall technology is used between the internal network and the Internet.
Screen savers and password access is fitted to block unauthorised viewing.
Access to patient data is restricted to the employees of The Far North Queensland Clinic.
Shredding destroys identifying printed data.
Telephone conversations are handled discreetly and where possible without any identifying names used, any sensitive telephone conversations are taken away from the patient waiting area.
Patient information is secured at Far North Queensland Clinic premises in locked cabinets.
Communications with associated medical teams are bound by disclosure requests for tender to a third party.
Consent is requested when seeking third party information regarding a patient’s previous medical or personal history.
The Treating Doctor directs all requests for release of information.